วันพุธที่ 10 กันยายน พ.ศ. 2557

Buffalo WCR-G300

วันนี้ผมมีเราเตอร์มารีวิวอีกตัวนึงเป็นของ Buffalo รุ่น WCR-G300 มี 1 WAN, 4 LAN, Wireless b/g/n 300 Mbps เสาเป็นแบบถอดเปลี่ยนไม่ได้
ตัวเครื่องภายนอก
ภายในเครื่องใช้ CPU ของ Ralink 
บอร์ดภายในเครื่อง
Ralink RT3352F -> 802.11n Wireless Router-on-a-Chip
Ralink RT3352F
EtronTech EM639165TS -> 8Mega x 16 Synchronous DRAM (SDRAM) 
EtronTech EM639165TS
MXIC MX25L3206E -> 32M-BIT [x 1 / x 2] CMOS SERIAL FLASH
MXIC MX25L3206E
MP1482DS -> 2A, 18V Synchronous Rectified Step-Down Converter เป็นวงจรแปลงไฟ 3.3v
MP1482DS
พอร์ต Serial ความเร็ว 57600 และพอร์ต JTAG
พอร์ต Serial & JTAG
อีกด้านของบอร์ด
หน้า Web สำหรับ Config ใช้ IP 192.168.11.1
Web Config
Boot Message
U-Boot 1.1.3 (Nov 11 2011 - 21:40:07)

Board: Ralink APSoC DRAM:  16 MB
relocate_code Pointer at: 80fb0000
******************************
Software System Reset Occurred
******************************
spi_wait_nsec: 3c
spi device id: c2 20 16 c2 20 (2016c220)
find flash: MX25L3205D
raspi_read: from:30000 len:1000
.raspi_read: from:30000 len:1000
.*** Check if data is correct or not...
*** Data is correct.
============================================
Ralink UBoot Version: 3.5.3.0
Buffalo UBoot Version: 3.00
--------------------------------------------
ASIC 3352_MP (Port5<->None)
DRAM_CONF_FROM: Boot-Strapping
DRAM_TYPE: SDRAM
DRAM_SIZE: 128 Mbits
DRAM_WIDTH: 16 bits
DRAM_TOTAL_WIDTH: 16 bits
TOTAL_MEMORY_SIZE: 16 MBytes
Flash component: SPI Flash
Date:Nov 11 2011  Time:21:40:07
============================================
icache: sets:256, ways:4, linesz:32 ,total:32768
dcache: sets:128, ways:4, linesz:32 ,total:16384

 ##### The CPU freq = 400 MHZ ####
 estimate memory size =16 Mbytes

Please choose the operation:
   1: Load system code to SDRAM via TFTP.
   2: Load system code then write to Flash via TFTP.
   3: Boot system code via Flash (default).
   4: Entr boot command line interface.
   7: Load Boot Loader code then write to Flash via Serial.
   9: Load Boot Loader code then write to Flash via TFTP.                     0

3: System Boot system code via Flash.
## Booting image at bc050000 ...
raspi_read: from:50000 len:40
.   Image Name:   Linux Kernel Image
   Created:      2012-11-27   7:57:49 UTC
   Image Type:   MIPS Linux Kernel Image (lzma compressed)
   Data Size:    3243968 Bytes =  3.1 MB
   Load Address: 80000000
   Entry Point:  80320000
raspi_read: from:50040 len:317fc0
..................................................   Verifying Checksum ... OK
   Uncompressing Kernel Image ... OK
No initrd
## Transferring control to Linux (at address 80320000) ...
## Giving linux memsize in MB, 16

Starting kernel ...


LINUX started...

 THIS IS ASIC
Linux version 2.6.21 (root@SWD1-CVS3) (gcc version 3.4.2) #3 Thu Nov 22 16:16:16 CST 2012

 The CPU feqenuce set to 400 MHz
CPU revision is: 0001964c
Determined physical RAM map:
 memory: 01000000 @ 00000000 (usable)
Built 1 zonelists.  Total pages: 4064
Kernel command line: console=ttyS1,57600n8 root=/dev/mtdblock4
Primary instruction cache 32kB, physically tagged, 4-way, linesize 32 bytes.
Primary data cache 16kB, 4-way, linesize 32 bytes.
Synthesized TLB refill handler (20 instructions).
Synthesized TLB load handler fastpath (32 instructions).
Synthesized TLB store handler fastpath (32 instructions).
Synthesized TLB modify handler fastpath (31 instructions).
Cache parity protection disabled
cause = 50808000, status = 11000000
PID hash table entries: 64 (order: 6, 256 bytes)
calculating r4koff... 00186a00(1600000)
CPU frequency 400.00 MHz
Using 200.000 MHz high precision timer.
Dentry cache hash table entries: 2048 (order: 1, 8192 bytes)
Inode-cache hash table entries: 1024 (order: 0, 4096 bytes)
Memory: 12840k/16384k available (2871k kernel code, 3544k reserved, 325k data, 108k init, 0k highmem)
Mount-cache hash table entries: 512
NET: Registered protocol family 16
NET: Registered protocol family 2
Time: MIPS clocksource has been installed.
IP route cache hash table entries: 1024 (order: 0, 4096 bytes)
TCP established hash table entries: 512 (order: 0, 4096 bytes)
TCP bind hash table entries: 512 (order: -1, 2048 bytes)
TCP: Hash tables configured (established 512 bind 512)
TCP reno registered
deice id : c2 20 16 c2 20 (2016c220)
MX25L3205D(c2 2016c220) (4096 Kbytes)
mtd .name = raspi, .size = 0x00400000 (4M) .erasesize = 0x00010000 (64K) .numeraseregions = 0
Creating 6 MTD partitions on "raspi":
0x00000000-0x00030000 : "Bootloader"
0x00030000-0x00040000 : "Config"
0x00040000-0x00050000 : "Factory"
0x00050000-0x00180000 : "Kernel"
0x00180000-0x003b0000 : "RootFS"
0x003b0000-0x00400000 : "User_CFG"
squashfs: version 3.2-r2 (2007/01/15) Phillip Lougher
squashfs: LZMA suppport for slax.org by jro
JFFS2 version 2.2. (NAND) (SUMMARY)  (C) 2001-2006 Red Hat, Inc.
io scheduler noop registered (default)
Ralink gpio driver initialized
HDLC line discipline: version $Revision: 1.1.1.1 $, maxframe=4096
N_HDLC line discipline registered.
Ralink APSoC Hardware Watchdog Timer
Serial: 8250/16550 driver $Revision: 1.7 $ 2 ports, IRQ sharing disabled
serial8250: ttyS0 at I/O 0xb0000500 (irq = 37) is a 16550A
serial8250: ttyS1 at I/O 0xb0000c00 (irq = 12) is a 16550A
loop: loaded (max 8 devices)
rdm_major = 254
Ralink APSoC Ethernet Driver Initilization. v2.1  256 rx/tx descriptors allocated, mtu = 1500!
MAC_ADRH -- : 0x0000000c
MAC_ADRL -- : 0x43335277
PROC INIT OK!
PPP generic driver version 2.4.2
PPP BSD Compression module registered
NET: Registered protocol family 24
PPPoL2TP kernel driver, V0.17
PPTP driver version 0.8.1
flash0: started
block2mtd: version $Revision: 1.1.1.1 $
nf_conntrack version 0.5.0 (128 buckets, 1024 max)
ip_tables: (C) 2000-2006 Netfilter Core Team, Type=Restricted Cone
TCP cubic registered
NET: Registered protocol family 1
NET: Registered protocol family 17
802.1Q VLAN Support v1.8 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Freeing unused kernel memory: 108k freed
init started: BusyBox v1.12.1 (2012-11-22 16:09:35 CST)
starting pid 13, tty '': '/etc_ro/rcS'
Algorithmics/MIPS FPU Emulator v1.5
devpts: called with bogus options
mount: mounting none on /proc/bus/usb failed: No such file or directory
Welcome to
     _______  _______  ___     __  ____   _  _   ___
    |  ___  \|   __  ||   |   |__||    \ | || | /  /
    | |___| ||  |__| ||   |__  __ |     \| || |/  /
    |   _   /|   _   ||      ||  || |\     ||     \
    |__| \__\|__| |__||______||__||_| \____||_|\___\

                     =System Architecture Department=

[check_jffs]80 : JFFS_OK
Set: phy[0].reg[0] = 3100
Set: phy[1].reg[0] = 3100
Set: phy[2].reg[0] = 3100
Set: phy[3].reg[0] = 3100
Set: phy[4].reg[0] = 3100
nvram_init: INFO=>nvram MAC initialized successfully!
==>shm_init()!!
check_shm_hash: Check shm hash value
nvram_init: INFO=>nvram conf initialized successfully!
nvram_init: INFO=> RAM CONF successful created!
nvram_init: INFO=> RC.CONF successful created!
---------------- Get WLAN MAC 10:6f:3f:6d:4d:bc---------------
switch reg write offset=94, value=1000
switch reg write offset=14, value=405555
switch reg write offset=50, value=2001
switch reg write offset=98, value=7f3f
switch reg write offset=e4, value=3f
switch reg write offset=40, value=1001
switch reg write offset=44, value=1001
switch reg write offset=48, value=1002
switch reg write offset=70, value=ffff506f

phy_tx_ring = 0x00ac9000, tx_ring = 0xa0ac9000

phy_rx_ring0 = 0x00aca000, rx_ring0 = 0xa0aca000
MAC_ADRH -- : 0x0000106f
MAC_ADRL -- : 0x3f6d4dbc
RT305x_ESW: Link Status Changed
CDMA_CSG_CFG = 81000007
GDMA1_FWD_CFG = C0710000
vlan0001: Setting MAC address to  10 6f 3f 6d 4d bc.
VLAN (vlan0001):  Underlying device (eth2) has same MAC, not checking promiscious mode.
vlan0002: Setting MAC address to  10 6f 3f 6d 4d bc.
VLAN (vlan0002):  Underlying device (eth2) has same MAC, not checking promiscious mode.
vlan0001: dev_set_promiscuity(master, 1)
device eth2 entered promiscuous mode
device vlan0001 entered promiscuous mode
input_access=[3]
echo 3 > /proc/lan_wlan_access_controller
br0: port 1(vlan0001) entering learning state
Fri Jan  1 00:00:00 GMT 2010
device ra2 is already a member of a bridge; can't enslave it to bridge br0.
[Enter Test] in wlan_led_ctrl.c main()
.brctl setwlanforward br0 15
libupnp: using UDP SSDP_PORT = 1900
rmmod: ipv6passthru: No such file or directory
rmmod: ipv6passthru: No such file or directory
/usr/shell/dnsmasq.sh stop ok
/usr/shell/dnsmasq.sh start ok
dnsmasq: [truncated] m
/usr/shell/udhcpd.sh config ok
/usr/shell/udhcpd.sh start ok

***** g_wl_interface = ra0 ******

MAX_NUM_SESSIONS : 5; NUM_SEES: 64
starting pid 810, tty '/dev/ttyS1': '/bin/sh'


BusyBox v1.12.1 (2012-11-22 16:09:35 CST) built-in shell (ash)
Enter 'help' for a list of built-in commands.

#

cpuinfo
# cat /proc/cpuinfo
system type             : Ralink SoC
processor               : 0
cpu model               : MIPS 24K V4.12
BogoMIPS                : 266.24
wait instruction        : yes
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : yes
hardware watchpoint     : yes
ASEs implemented        : mips16 dsp
VCED exceptions         : not available
VCEI exceptions         : not available

mtd
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00030000 00010000 "Bootloader"
mtd1: 00010000 00010000 "Config"
mtd2: 00010000 00010000 "Factory"
mtd3: 00130000 00010000 "Kernel"
mtd4: 00230000 00010000 "RootFS"
mtd5: 00050000 00010000 "User_CFG"

ไฟล์ MTD ที่ Backup มา

วันอังคารที่ 9 กันยายน พ.ศ. 2557

Linksys WRT300N v1.1

เราเตอร์ตัวนี้มีพอร์ต WAN 1 พอร์ต, LAN 4 พอร์ต Wireless b/g/n 300 Mbps มีเสาสัญญาณ 3 เสา
ตัวเครื่องภายนอก
ภายในเราเตอร์มีบอร์ดหลักอยู่
ภายในเราเตอร์
ไอซีหลักๆ ในบอร์ดคือ
Broadcom BCM4705 -> 802.11n GbE Processor
Broadcom BCM4705
Hynix HY5DU281622FTP -> 4 Banks x 2M x 16Bit Double Data Rate SDRAM จำนวน 2 ตัว ความจุรวม 32 MB
Hynix HY5DU281622FTP
Broadcom BCM5325E -> SIX-PORT MANAGED 10/100 ROBOswitch™
Broadcom BCM5325E
Samsung K8D6316UBM -> 64M Bit (8M x8/4M x16) Dual Bank NOR Flash Memory
Samsung K8D6316UBM
Broadcom BCM4321 -> MAC/baseband controller for draft-802.11n and 802.11a/b/g devices (PCI/PCI Express®/CardBus)
Broadcom BCM4321
ภายในโลหะป้องกันสัญญาณรบกวน
Broadcom BCM2055 -> 2x2 dual-band single-chip radio—3x3 and 4x4 antenna options for increased range and performance
Broadcom BCM2055
SiGe SE2528L ->  2.4 GHz Power Amplifier with Power Detector
SiGe SE2528L
MP9141ES -> 40ns, Low-Power, 3V/5V, Rail-to-Rail Single-Supply Comparators
MP9141ES
AO 1117L -> 1A LOW DROPOUT LINEAR REGULATOR
AO 1117L
RAV6J -> ???
RAV6J
ใต้บอร์ดไมมีไอซีใดๆ
ใต้บอร์ด
ระบบไฟภายในบอร์ด และพอร์ต Serial
แรงดันไฟและพอร์ต Serial
Boot Message ของเฟิร์มแวร์เดิม
Start to blink diag led ...


CFE version 1.0.37 for BCM947XX (32bit,SP,LE)
Build Date: Tue Feb 27 19:35:53 CST 2007 (root@localhost.localdomain)
Copyright (C) 2000,2001,2002,2003 Broadcom Corporation.

Initializing Arena
Initializing PCI. [normal]
PCI bus 0 slot 0/0: vendor 0x14e4 product 0x0800 (flash memory, rev 0x02)
PCI bus 0 slot 1/0: vendor 0x14e4 product 0x471f (ethernet network, rev 0x02)
PCI bus 0 slot 2/0: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x10, rev 0x02)
PCI bus 0 slot 2/1: vendor 0x14e4 product 0x471a (USB serial bus, interface 0x20, rev 0x02)
PCI bus 0 slot 3/0: vendor 0x14e4 product 0x471b (USB serial bus, rev 0x02)
PCI bus 0 slot 4/0: vendor 0x14e4 product 0x0804 (PCI bridge, rev 0x02)
PCI bus 0 slot 5/0: vendor 0x14e4 product 0x0816 (MIPS processor, rev 0x02)
PCI bus 0 slot 6/0: vendor 0x14e4 product 0x471d (IDE mass storage, rev 0x02)
PCI bus 0 slot 7/0: vendor 0x14e4 product 0x4718 (network/computing crypto, rev 0x02)
PCI bus 0 slot 8/0: vendor 0x14e4 product 0x080f (RAM memory, rev 0x02)
PCI bus 0 slot 9/0: vendor 0x14e4 product 0x471e (class 0xfe, subclass 0x00, rev 0x02)
Initializing Devices.

No DPN
This is a Parallel Flash
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 0004001B  (28)
os      #02   0004001C -> 007F7FFF  (8093668)
nvram   #03   007F8000 -> 007FFFFF  (32768)
Partition information:
boot    #00   00000000 -> 0003FFFF  (262144)
trx     #01   00040000 -> 007F7FFF  (8093696)
nvram   #02   007F8000 -> 007FFFFF  (32768)
Reset switch via GPIO 8 ...
PCI bus 0 slot 1/0: pci_map_mem: attempt to map 64-bit region tag=0x800 @ addr=18010004
PCI bus 0 slot 1/0: pci_map_mem: addr=0x18010004 pa=0x18010000
ge0: BCM5750 Ethernet at 0x18010000
CPU type 0x2901A: 300MHz
Total memory: 32768 KBytes

Total memory used by CFE:  0x80600000 - 0x806A1900 (661760)
Initialized Data:          0x80636C40 - 0x80639BE0 (12192)
BSS Area:                  0x80639BE0 - 0x8063B900 (7456)
Local Heap:                0x8063B900 - 0x8069F900 (409600)
Stack Area:                0x8069F900 - 0x806A1900 (8192)
Text (code) segment:       0x80600000 - 0x80636C40 (224320)
Boot area (physical):      0x006A2000 - 0x006E2000
Relocation Factor:         I:00000000 - D:00000000

Boot version: v4.4
The boot is CFE
mac_init(): Find mac [00:1c:10:38:d4:92] in location 0
Nothing...
CMD: [ifconfig eth0 -addr=192.168.1.1 -mask=255.255.255.0]
eth0: Link speed: 100BaseT FDX
Device eth0:  hwaddr 00-1C-10-38-D4-92, ipaddr 192.168.1.1, mask 255.255.255.0
        gateway not set, nameserver not set
CMD: [go;]
Check CRC of image1
  Len:     0x388000     (3702784)       (0xBC040000)
  Offset0: 0x1C         (28)            (0xBC04001C)
  Offset1: 0x8A4        (2212)  (0xBC0408A4)
  Offset2: 0x816E0      (530144)        (0xBC0C16E0)
  Header CRC:    0x50C99081
  Calculate CRC: 0x50C99081
Image 1 is OK
Try to load image 1.
CMD: [boot -raw -z -addr=0x80001000 -max=0xf70000 flash0.os:]
Loader:raw Filesys:raw Dev:flash0.os File: Options:(null)
Loading: .. 3560 bytes read
Entry at 0x80001000
Closing network.
eth0: cannot clear 1400/00000002
Starting program at 0x80001000
CPU revision is: 0002901a
Primary instruction cache 32kb, linesize 16 bytes (4 ways)
Primary data cache 32kb, linesize 16 bytes (2 ways)
Linux version 2.4.20 (root@localhost.localdomain) (gcc version 3.2.3 with Broadcom modifications) #2 Tue Feb 27 12:13:54 CST 2007
Setting the PFC to its default value
Determined physical RAM map:
 memory: 02000000 @ 00000000 (usable)
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/mtdblock2 noinitrd console=ttyS0,115200
CPU: BCM4785 rev 2 at 300 MHz
Calibrating delay loop... 299.82 BogoMIPS
Memory: 30564k/32768k available (1431k kernel code, 2204k reserved, 108k data, 68k init, 0k highmem)
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Checking for 'wait' instruction...  unavailable.
POSIX conformance testing by UNIFIX
PCI: Initializing host
PCI: Enabling CardBus
PCI: Fixing up bus 0
PCI: Fixing up bridge
PCI: Fixing up bus 1
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
devfs: v1.12c (20020818) Richard Gooch (rgooch@atnf.csiro.au)
devfs: boot_options: 0x1
squashfs: version 3.0 (2006/03/15) Phillip Lougher
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with MANY_PORTS SHARE_IRQ SERIAL_PCI enabled
ttyS00 at 0xb8000300 (irq = 8) is a 16550A
ttyS01 at 0xb8000400 (irq = 0) is a 16550A
HDLC line discipline: version $Revision: 1.1.1.4 $, maxframe=4096
N_HDLC line discipline registered.
Register DIAG LED in /proc/sys/diag_blink.
The DIAG LED GPIO is 1.
PPP generic driver version 2.4.2
 Amd/Fujitsu Extended Query Table v0.0 at 0x0040
cfi_cmdset_0002(): cfi->mfr=ec, cfi->id=e2
cfi_cmdset_0002(): bootloc=2
cfi_cmdset_0002(): Region=0 BlockSize 0x2000 bytes, 8 blocks
cfi_cmdset_0002(): Region=1 BlockSize 0x10000 bytes, 127 blocks
number of CFI chips: 1
Flash device: 0x800000 at 0x1c000000
Physically mapped flash: squashfs filesystem found at block 773
(Not Found Lang Block)off=0xc16e0 off1=0x7a0000 size=0x800000
Creating 5 MTD partitions on "Physically mapped flash":
0x00000000-0x00040000 : "pmon"
0x00040000-0x007a0000 : "linux"
0x000c16e0-0x007a0000 : "rootfs"
mtd: partition "rootfs" doesn't start on an erase block boundary -- force read-only
0x007a0000-0x007f0000 : "lang"
0x007f0000-0x00800000 : "nvram"
sflash: found no supported devices
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 4096)
Linux IP multicast router 0.06 plus PIM-SM
ip_conntrack version 2.1 (256 buckets, 2048 max) - 368 bytes per conntrack
Register conntrack protocol helper for ESP...
init IP_nat_proto_esp register.
ip_conntrack_pptp version 1.9 loaded
ip_conntrack_rtsp v0.01 loading
ip_nat_pptp version 1.5 loaded
ip_nat_rtsp v0.01 loading
ip_tables: (C) 2000-2002 Netfilter core team
ipt_time loading
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
NET4: Ethernet Bridge 008 for NET4.0
802.1Q VLAN Support v1.7 Ben Greear <greearb@candelatech.com>
All bugs added by David S. Miller <davem@redhat.com>
VFS: Mounted root (squashfs filesystem) readonly.
Mounted devfs on /dev
Freeing unused kernel memory: 68k freed
Algorithmics/MIPS FPU Emulator v1.5
find "lang" in MTD 3 (/dev/mtdblSQUASHFS error: Can't find a SQUASHFS superblock on mtdblock(31,3)
ock/3)
ret = -1
www -> /www
mount: Invalid argument
Language Package: EN
modules[0]=bcm57xx buf=[bcm57xx ]
modules[1]=ctmisc buf=[bcm57xx ctmisc ]
modules[2]=wl buf=[bcm57xx ctmisc wl ]
Needed modules: bcm57xx ctmisc wl
cmd=[insmod bcm57xx ]
Using /lib/modules/2.4.20/kernel/drivers/net/bcm57xx/bcm57xx.o
cmd=[insmod ctmisc ]
Using /lib/modules/2.4.20/kernel/drivers/net/ctmisc/ctmisc.o
cmd=[insmod wl ]
Using /lib/modules/2.4.20/kernel/drivers/net/wl/wl.o
Hit enter to continue...The chipset is BCM4705L + BCM5325E
cmd=[misc -t get_mac -w 3 ]
type = [get_mac]
get_data(): cmd=0x11 count=8 len=18
get_data(): Get MAC count is [1]
get_data(): MAC 0: [00:1c:10:38:d4:92]
get_data(): done
cmd=[misc -t get_sn -w 3 ]
type = [get_sn]
get_data(): cmd=0x15 count=8 len=20
get_data(): Get SN count is [1]
get_data(): SN 0: [CNP11G625500????????]
get_data(): done
cmd=[misc -t get_flash_type -w 1 ]
type = [get_flash_type]
get_flash_type(): cmd=0x17 count=0 len=0
Get FLASH TYPE is [Samsung K8D6316UBM 4Mx16 BotB]
cmd=[misc -t get_pa0 -w 3 ]
type = [get_pa0]
get_data(): cmd=0x20 count=100 len=4
get_data(): Get PA0 count is [1]
get_data(): PA0 0: [74??]
get_data(): done
cmd=[misc -t get_pa1 -w 3 ]
type = [get_pa1]
get_data(): cmd=0x21 count=100 len=4
get_data(): Get PA1 count is [1]
get_data(): PA1 0: [71??]
get_data(): done
cmd=[misc -t get_pa0_old -w 3 ]
type = [get_pa0_old]
get_data(): cmd=0x24 count=8 len=4
get_data(): Get PA0 count is [0]
get_data(): done
cmd=[misc -t get_pa1_old -w 3 ]
type = [get_pa1_old]
get_data(): cmd=0x25 count=8 len=4
get_data(): Get PA1 count is [0]
get_data(): done
The boot is CFE
cmd=[killall httpd ]
killall: httpd: no process killed
cmd=[resetbutton ]
cmd=[vconfig set_name_type VLAN_PLUS_VID_NO_PAD ]
cmd=[vconfig add eth0 0 ]
cmd=[vconfig set_ingress_map vlan0 0 0 ]
cmd=[vconfig set_ingress_map vlan0 1 1 ]
cmd=[vconfig set_ingress_map vlan0 2 2 ]
cmd=[vconfig set_ingress_map vlan0 3 3 ]
cmd=[vconfig set_ingress_map vlan0 4 4 ]
cmd=[vconfig set_ingress_map vlan0 5 5 ]
cmd=[vconfig set_ingress_map vlan0 6 6 ]
cmd=[vconfig set_ingress_map vlan0 7 7 ]
cmd=[vconfig add eth0 1 ]
cmd=[vconfig set_ingress_map vlan1 0 0 ]
cmd=[vconfig set_ingress_map vlan1 1 1 ]
cmd=[vconfig set_ingress_map vlan1 2 2 ]
cmd=[vconfig set_ingress_map vlan1 3 3 ]
cmd=[vconfig set_ingress_map vlan1 4 4 ]
cmd=[vconfig set_ingress_map vlan1 5 5 ]
cmd=[vconfig set_ingress_map vlan1 6 6 ]
cmd=[vconfig set_ingress_map vlan1 7 7 ]
cmd=[insmod wl ]
Using /lib/modules/2.4.20/kernel/drivers/net/wl/wl.o
insmod: A module named wl already exists
cmd=[brctl addbr br0 ]
cmd=[brctl setfd br0 0 ]
cmd=[brctl stp br0 dis ]
name=[vlan0] lan_ifname=[br0]
=====> set br0 hwaddr to vlan0
cmd=[wlconf vlan0 up ]
vlan0: Operation not supported
cmd=[brctl addif br0 vlan0 ]
name=[eth1] lan_ifname=[br0]
Write wireless mac successfully
br0: No such file or directory
cmd=[wlconf eth1 up ]
eth1: Numerical result out of range
eth1: Operation not supported
eth1: Invalid argument
eth1: Invalid argument
eth1: Operation not supported
eth1: Operation not supported
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
eth1: Invalid argument
cmd=[brctl addif br0 eth1 ]
name=[eth2] lan_ifname=[br0]
eth2: No such device
name=[eth3] lan_ifname=[br0]
eth3: No such device
wl                    634208   0 (unused)
cmd=[wl gpiotimerval 0x640000 ]
cmd=[wl vlan_mode 0 ]
lo: File exists
cmd=[tftpd -s /tmp -c -l -P EWC2 ]
cmd=[cron ]
[HTTPD Starting on /www]
The boot is CFE
tftp server started
tftpd: standalone socket
cmd=[httpd ]
br0 192.168.1.100  86400
cmd=[udhcpd /tmp/udhcpd.conf ]
info, udhcp server (v0.9.8) started
zebra disabled.
cmd=[nas /tmp/nas.lan.conf /tmp/nas.lan.pid lan ]
cmd=[upnp -D -L br0 -W  -S 0 -I 60 -A 180 ]
No interface specified. Quitting...
calling upnp_main
LLTD: wireless interface argument is eth1.
tallest:=====( wan_or_lan=wan )=====
tallest:=====( wan_or_lan=wan is wan !!)=====
cmd=[udhcpc -i vlan1 -l br0 -p /var/run/wan_udhcpc.pid -s /tmp/udhcpc ]
info, udhcp client (v0.9.8) started
Hit enter to continue...cmd=[nas /tmp/nas.wan.conf /tmp/nas.wan.pid wan ]
No interface specified. Quitting...
Hit enter to continue...


BusyBox v0.60.0 (2007.02.27-03:13+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.

#
#

cpuinfo
# cat /proc/cpuinfo
system type             : Broadcom BCM4785 chip rev 2
processor               : 0
cpu model               : BCM3302 V1.10
BogoMIPS                : 299.82
wait instruction        : no
microsecond timers      : yes
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available
unaligned_instructions  : 0
dcache hits             : 0
dcache misses           : 0
icache hits             : 0
icache misses           : 0
instructions            : 0

mtd
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00040000 00010000 "pmon"
mtd1: 00760000 00010000 "linux"
mtd2: 006de920 00010000 "rootfs"
mtd3: 00050000 00010000 "lang"
mtd4: 00010000 00010000 "nvram"
ifconfig
# ifconfig
br0       Link encap:Ethernet  HWaddr 00:1C:10:XX:XX:XX
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1 errors:0 dropped:0 overruns:0 frame:0
          TX packets:201 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:6 (6.0 b)  TX bytes:77376 (75.5 kb)

eth0      Link encap:Ethernet  HWaddr 00:1C:10:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:423 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 b)  TX bytes:207786 (202.9 kb)
          Interrupt:5 Memory:18010000-18020000

eth1      Link encap:Ethernet  HWaddr 00:1C:10:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:372889
          TX packets:201 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 b)  TX bytes:78984 (77.1 kb)
          Interrupt:6 Base address:0x4000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING MULTICAST  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

vlan0     Link encap:Ethernet  HWaddr 00:1C:10:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:202 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:77396 (75.5 kb)

vlan1     Link encap:Ethernet  HWaddr 00:1C:10:XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:221 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 b)  TX bytes:130390 (127.3 kb)

File Bootloader กับ nvram

วันจันทร์ที่ 8 กันยายน พ.ศ. 2557

D-Link DIR-600L HW: B1

เราเตอร์ตัวนี้มี 1 WAN, 4 LAN ไวเลสความเร็ว 150 Mbps
ตัวเครื่องภายนอก
ภายในเครื่องใช้ไอซี Realtek เป็นหน่วยประมวณผลหลัก โดยภายในวงจรมีไอซีหลักๆ คือ
ภายในเราเตอร์
Realtek RTL8196E -> CPU
Realtek RTL8196E
Winbond W9825G6JH-6 -> 4M x 4 Bank x 16 Bits SDRAM
Winbond W9825G6JH-6
MXIC MX25L3206E -> 32M-BIT [x 1 / x 2] CMOS SERIAL FLASH
MXIC MX25L3206E
Realtek RTL8188ER -> PCIe Wireless bgn 1x1:1
Realtek RT8188ER
Richtek RT7247AH -> 2A, 18V, 340kHz Synchronous Step-Down Converter
Richtek RT7247AH
พอร์ตการต่อเชื่อมภายในมี 2 พอร์ตคือ พอร์ต Serial กับ พอร์ต JTAG
พอร์ต Serial
พอร์ต JTAG แบบ 12 ขา
JTAG
ใต้บอร์ด
Boot Message

Booting...
OK
OK



---RealTek(RTL8196E-kld) version v3.0.2e(2013.01.24-15:08+0800) [16bit](400MHz)
Jump to image start=0x80500000...
decompressing kernel:
Uncompressing Linux... done, booting the kernel.
done decompressing kernel.
Creating 4 MTD partitions on "Physically mapped flash":
0x00000000-0x000e0000 : "boot+cfg+linux"
master size 0x004000000x000e0000-0x00370000 : "root fs"
master size 0x004000000x00370000-0x00380000 : "webpage"
master size 0x004000000x00380000-0x00400000 : "mydlink"
master size 0x00400000RTL8188ER driver version 3.2.0.2 (2012-04-12)
init started:  BusyBox v1.01 (2013.03.22-06:06+0000) multi-call binary
Starting pid 9, console /dev/ttyS0: '/bin/sh'


BusyBox v1.01 (2013.03.22-06:06+0000) Built-in shell (msh)
Enter 'help' for a list of built-in commands.

54
Init Start...
mkdir: Cannot create directory `/var/system': File exists
iwpriv wlan0 set_mib tx_pwr_ctrl=0
set 615 wlan channel
iwpriv wlan0 write_mem dw,b8000048,1,4026d832
Init bridge interface...
Init Wlan application...

WiFi Simple Config v2.7-wps2.0 (2013.03.22-09:03+0000).

Init WAN Interface...

MiniIGD v1.08 (2012.01.04-11:20+0000).

Start telnetd ...
0DevInfo.txt text mode!
hard ver isB1
314
boa: server version Boa/0.94.14rc21
boa: server built Mar 22 2013 at 17:03:12.
boa: starting server pid=313, port 80
killall: mydlink-watch-dog.sh: no process killed
killall: signalc: no process killed
killall: tsa: no process killed
opt.local stop ok.
opt.local start ok.
369
# smart 404 ----------------------------------
killall: dnsmasq: no process killed
killall: proxyd: no process killed
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)
iptables: Bad rule (does a matching rule exist in that chain?)
smart404 start ok.

#

cpuinfo
# cat /proc/cpuinfo
system type             : Philips Nino
processor               : 0
cpu model               : R3000 V0.0
BogoMIPS                : 399.76
wait instruction        : yes
microsecond timers      : no
tlb_entries             : 32
extra interrupt vector  : no
hardware watchpoint     : no
VCED exceptions         : not available
VCEI exceptions         : not available
ll emulations           : 0
sc emulations           : 0
mtd
# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 000e0000 00001000 "boot+cfg+linux"
mtd1: 00290000 00001000 "root fs"
mtd2: 00010000 00001000 "webpage"
mtd3: 00080000 00001000 "mydlink"

ifconfig
# ifconfig
br0       Link encap:Ethernet  HWaddr 78:54:2E:XX:XX:XX
          inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:768 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1205 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:71221 (69.5 KiB)  TX bytes:540308 (527.6 KiB)

eth0      Link encap:Ethernet  HWaddr 78:54:2E:
XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:544 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:91343 (89.2 KiB)
          Interrupt:2 Base address:0x4000

eth1      Link encap:Ethernet  HWaddr 78:54:2E:
XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:0 (0.0 B)  TX bytes:28320 (27.6 KiB)
          Interrupt:2 Base address:0x4000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:716 errors:0 dropped:0 overruns:0 frame:0
          TX packets:716 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:82724 (80.7 KiB)  TX bytes:82724 (80.7 KiB)

wlan0     Link encap:Ethernet  HWaddr 78:54:2E:
XX:XX:XX
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:35851 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3101 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:6578412 (6.2 MiB)  TX bytes:1324539 (1.2 MiB)
          Interrupt:21

#